Google Chrome < 61.0.3163.79 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 61.0.3163.79. It is, therefore, affected by multiple vulnerabilities as referenced in the 201709stable-channel-update-for-desktop advisory. - Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Mac, Windows,...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 61 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 61.0.3163.79 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

CVE-2010-5117

CVE-2010-5117 entry is rejected/not used according to the initial description.

CVE-2010-5117

...

CVE-2016-5117

OpenNTPD before 6.0p1 does not validate the CN for HTTPS constraint requests, which allows remote attackers to bypass the man-in-the-middle mitigations via a crafted timestamp constraint with a valid certificate...

CVE-2016-5117

OpenNTPD before 6.0p1 does not validate the CN for HTTPS constraint requests, which allows remote attackers to bypass the man-in-the-middle mitigations via a crafted timestamp constraint with a valid certificate...

CVE-2016-5117

CVE-2016-5117 affects OpenNTPD before 6.0p1. The vulnerability is that OpenNTPD does not validate the CN for HTTPS constraint requests, allowing remote attackers to bypass MITM mitigations via a crafted timestamp constraint with a valid certificate. The documented remediation is to upgrade to Ope...

CVE-2015-3127

Technical details (affected products, versions, impact, or exploit information for CVE-2015-3127) are not provided in the supplied connected documents. Monitor for updates.

CVE-2015-4430

Technical details about CVE-2015-4430 are not publicly provided in the supplied connected documents. The CIRCL/Nessus entries reference related CVEs but do not disclose affected products, root cause, or remediation for this specific ID. Monitor for updates.

CVE-2015-3129

Technical details about CVE-2015-3129 are not provided in the supplied documents; no affected products, vulnerable components, impact, or remediation are disclosed. Monitor for official updates.

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt47

3:11-alt47 built July 8, 2015 Sergey V Turchin in task 146142 July 8, 2015 Sergey V Turchin - new version - security fixes: CVE-2014-0578, CVE-2015-3097, CVE-2015-3114, CVE-2015-3115, CVE-2015-3116, CVE-2015-3117, CVE-2015-3118, CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, CVE-2015-3122,...

Adobe Flash Player Use-After-Free Vulnerability (Jul 2015) - Mac OS X

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

DotNetNuke DNNArticle Module SQL Injection (CVE-2013-5117)

TODO...

Fedora Update for tor FEDORA-2014-9073

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : tor-0.2.4.23-1.fc20 (2014-9082)

Security fix for CVE-2014-5117 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

openSUSE Security Update : tor (openSUSE-SU-2014:0975-1)

Tor 0.2.4.23 bnc889688 CVE-2014-5117 Slows down the risk from guard rotation and backports several important fixes from the Tor 0.2.5 alpha release series. - Major features : - Clients now look at the 'usecreatefast' consensus parameter to decide whether to use CREATEFAST or CREATE cells for the...

Mandriva Linux Security Advisory : tor (MDVSA-2014:150)

Updated tor package fixes security vulnerability : Tor before 0.2.4.23 maintains a circuit after an inbound RELAYEARLY cell is received by a client, which makes it easier for remote attackers to conduct traffic-confirmation attacks by using the pattern of RELAY and RELAYEARLY cells as a means of...

[SECURITY] [DSA 2993-1] tor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2993-1 [email protected] http://www.debian.org/security/ Peter Palfrader July 31, 2014 http://www.debian.org/security/faq -...

CVE-2014-5117

CVE-2014-5117 affects Tor: in Tor 0.2.4.23 and 0.2.5 before 0.2.5.6-alpha, a client can be left with a circuit after an inbound RELAY_EARLY cell, enabling traffic-confirmation via RELAY/RELAY_EARLY patterns. Public advisories across multiple distros (Fedora/OpenSUSE/Mandriva) reference this vulne...

Debian: Security Advisory (DSA-2993-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...